KLA11003 Spoofing user interface vulnerability in Opera products

CVSS:

5.8

Detect date:

04/23/2016

Severity:

High

Description:

An address bar spoofing vulnerability was found in Opera Stable 36 and Opera Mini 13. By exploiting this vulnerability malicious users can spoof user interface (the displayed URL). This vulnerability can be exploited remotely via a specially designed HTML document, which is related to the about:blank URL.

Affected products:

Opera Mini 13
Opera Stable 36

Solution:

Update to the latest version
Download Opera Stable

Original advisories:

Opera URL Spoofing Proof of Concept

Impacts:

SUI

Related products:

Opera

CVE-IDS:

CVE-2016-4075